OAuth 2: Too many compromises | Hacker News Reader